Commit Graph

400 Commits

Author SHA1 Message Date
Joe Orton
71609fae14 update Obsoletes for mod_proxy_uswgi (#1599113)
Resolves: rhbz#httpd.spec
2018-07-18 20:22:36 +01:00
Joe Orton
5072c65a7b update to 2.4.34 (#1601160)
Resolves: rhbz#1601160
2018-07-18 11:55:03 +01:00
Joe Orton
bc2b0a9538 BR gcc 2018-07-16 20:41:32 +01:00
Joe Orton
6fd32168ff don't block on service try-restart in posttrans scriptlet
add Lua-based /server-status example page to docs
obsoletes: and provides: for mod_proxy_uswgi (#1599113)
Resolves: rhbz#1599113
2018-07-16 17:11:20 +01:00
Joe Orton
23fb452dae don't block on service try-restart in posttrans scriptlet 2018-07-16 17:02:19 +01:00
Joe Orton
7a7c76fbe0 add Lua-based /server-status example page to docs 2018-07-16 17:01:34 +01:00
Fedora Release Engineering
68920957bf - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 05:07:26 +00:00
Jason Tibbitts
1ee4430d42 Remove needless use of %defattr 2018-07-10 01:20:33 -05:00
Joe Orton
cdc2806d68 Merge branch 'f28' 2018-07-06 17:06:19 +01:00
Joe Orton
8ab39c8ee0 add per-request memory leak fix (upstream r1833014) 2018-07-06 17:03:22 +01:00
Joe Orton
1d78fa49cb mod_ssl: add PKCS#11 cert/key support (Anderson Sasaki) 2018-07-06 14:04:07 +01:00
Joe Orton
df56b6f20c - update for new mod_systemd patch 2018-06-12 16:08:30 +01:00
Joe Orton
3778b45de1 mod_systemd: show bound ports in status and log to journal
at startup.
2018-06-12 15:31:38 +01:00
Joe Orton
4bd9fa63fd add httpd@.service; update httpd.service(8) and add new stub 2018-05-01 09:49:06 +01:00
Joe Orton
e4c2da63b4 Omit multiproxy change. 2018-05-01 09:48:48 +01:00
Joe Orton
5dbb1d7cab mod_ssl: fix mod_nss compat patch (Rob Crittenden, #1566511)
mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
Resolves: rhbz#1566511
Resolves: rhbz#1563846
2018-05-01 09:48:09 +01:00
Joe Orton
07274a959f mod_ssl: drop implicit 'SSLEngine on' for vhost w/o certs (#1564537)
Resolves: rhbz#1564537
2018-05-01 09:47:41 +01:00
Joe Orton
5860daab11 add httpd@.service; update httpd.service(8) and add new stub 2018-04-19 17:18:11 +01:00
Joe Orton
799dcecff8 Use updated sslmultiproxy patch. 2018-04-16 08:44:34 +01:00
Joe Orton
dbbe3f2b69 mod_ssl: fix mod_nss compat patch (Rob Crittenden, #1566511)
mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
Resolves: rhbz#1566511
Resolves: rhbz#1563846
2018-04-16 08:25:48 +01:00
Joe Orton
616eacccb0 mod_ssl: drop implicit 'SSLEngine on' for vhost w/o certs (#1564537)
Resolves: rhbz#1564537
2018-04-12 08:03:52 +01:00
Adam Williamson
cb3c26bd43 Exclude mod_md config file from main package (#1562413) 2018-03-30 17:24:23 -07:00
Joe Orton
c7d07f31b9 rebase to 2.4.33 (#1560174)
add mod_md subpackage; load mod_proxy_uwsgi by default
2018-03-28 20:18:58 +01:00
Jitka Plesnikova
c144c0a274 Rebuilt with brotli 1.0.3 2018-03-05 09:36:51 +01:00
Joe Orton
4af7d39caf simplify liblua detection in configure 2018-02-26 12:28:41 +00:00
Igor Gnatenko
2919621fa4
Remove %clean section
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 08:07:05 +01:00
Igor Gnatenko
5450cc3ba1 Remove BuildRoot definition
None of currently supported distributions need that.
It was needed last for EL5 which is EOL now

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-13 23:30:42 +01:00
Fedora Release Engineering
cc87a074cd - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 16:31:52 +00:00
Joe Orton
2971e92b1f link mod_lua against -lcrypt (#1538992)
Resolves: rhbz#1538992
2018-01-27 09:19:58 +01:00
Paul Howarth
2820bed4db Rebuild with updated flags to work around compiler issues on i686 2018-01-26 17:23:59 +00:00
Björn Esser
b94d82008d
Rebuilt for switch to libxcrypt 2018-01-20 23:06:54 +01:00
Joe Orton
95a0c9518b build and load mod_brotli 2017-11-23 11:11:28 +00:00
Luboš Uhliarik
16b03b20d8 Removed patches, which are already included in upstream source 2017-10-25 14:28:47 +02:00
Luboš Uhliarik
082f3536aa new version 2.4.29 2017-10-25 14:20:19 +02:00
Joe Orton
596b5fc517 drop obsolete Obsoletes
update docs, Summary
trim %changelog
2017-10-10 15:23:11 +01:00
Patrick Uiterwijk
6ebb5a2203 Backport patch for fixing ticket key usage
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2017-10-10 13:31:46 +02:00
Luboš Uhliarik
01bcbc5642 new version 2.4.28 2017-10-06 18:14:03 +02:00
Joe Orton
6d96e6a193 add notes on enabling httpd_graceful_shutdown boolean for prefork 2017-10-03 09:16:29 +01:00
Joe Orton
d31ea66d9d drop Requires(post) for mod_ssl 2017-09-22 16:20:54 +01:00
Joe Orton
962c800331 better error handling in httpd-ssl-gencerts (#1494556)
Resolves: rhbz#1494556
2017-09-22 15:48:42 +01:00
Joe Orton
c094ba4827 Fix conditional. 2017-09-22 08:06:39 +01:00
Joe Orton
5ec11c5a4f Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/httpd 2017-09-22 08:05:04 +01:00
Joe Orton
ccd2dc5050 Fix MPM defaults if building on RHEL, fix touch -r for 00-mpm.conf. 2017-09-22 08:03:13 +01:00
Stephen Gallagher
d614e8aa11
Require sscg 2.2.0 for creating service and CA certificates together
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2017-09-21 14:55:16 -04:00
Jeroen van Meeuwen (Ergo Project)
10a87792e5 Address CVE-2017-9798 by applying upstream patch
Reference RHBZ #1490344
2017-09-21 19:28:15 +02:00
Joe Orton
6a77761740 use sscg defaults; append CA cert to generated cert
document httpd-init.service in httpd-init.service(8)
2017-09-21 16:41:20 +01:00
Stephen Gallagher
180ad320f4
Generate SSL keys on service start
This defers the creation of self-signed SSL certificates to the
first time that httpd starts up. This has several advantages:

* Waiting until the first boot will help avoid some issues with
  limited entropy in the install process.
* The certificates can be regenerated automatically whenever they
  are removed, which helps with tools such as virt-sysprep
* The certificates are now generated by SSCG, which produces a
  limited-trust CA alongside it that can be safely imported by a
  client.

For more information on SSCG, see:
https://sgallagh.wordpress.com/2016/05/02/self-signed-ssltls-certificates-why-they-are-terrible-and-a-better-alternative/

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2017-09-20 15:00:20 -04:00
Joe Orton
e2185159ed move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-09-19 10:08:07 +01:00
Joe Orton
a7a88382f7 move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-09-19 10:02:32 +01:00
Joe Orton
b022e3b523 add new content-length filter (upstream PR 61222) 2017-09-13 14:21:17 +01:00